6fb8b6644b87a1498d75a0ed4ebdef7d958df746e69f0c3bf5940838bbdb1ccb

Sharing

Copy URL Twitter E-mail

General

Target

6fb8b6644b87a1498d75a0ed4ebdef7d958df746e69f0c3bf5940838bbdb1ccb
Size

7.1MB
MD5

8fcbe3c682de7fa6043d3c1245b71452
SHA1

67adbc3ab9478b663729df2a64ed28cd92d05fb9
SHA256

6fb8b6644b87a1498d75a0ed4ebdef7d958df746e69f0c3bf5940838bbdb1ccb
SHA512

004cf1c4caee3c943ea4a0c8ad05b6e2da9618448fa5f16138dbe00b7a5a8dd59ce50f8fbf680115587d4b68de4afec15df23363f1b4d708d7c3fcb53b90f6de
SSDEEP

98304:eoAvyl4BJ9JOXn/Gxsk6zEMteWJfAdAAQ5dbgfCKnu3KdAhfy4IgEsRK3s8s8Pht:Kyl4J9J0nubO19nsfu2K6JlsRK874Av

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fb8b6644b87a1498d75a0ed4ebdef7d958df746e69f0c3bf5940838bbdb1ccb

Files

6fb8b6644b87a1498d75a0ed4ebdef7d958df746e69f0c3bf5940838bbdb1ccb
.exe windows:4 windows x86 arch:x86

ce7fac4dea34c337f6a8d5aa7e067e58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetModuleHandleA

winmm

waveOutRestart

ws2_32

WSAStartup

rasapi32

RasEnumConnectionsA

user32

ScrollWindowEx

gdi32

FillRgn

msimg32

GradientFill

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

SHBrowseForFolderA

ole32

CoTaskMemAlloc

oleaut32

SafeArrayGetDim

comctl32

ImageList_GetIcon

wininet

InternetOpenUrlA

secur32

GetUserNameExA

urlmon

URLDownloadToFileW

shlwapi

StrTrimA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mapo2
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ce7fac4dea34c337f6a8d5aa7e067e58

Headers

File Characteristics

Imports

kernel32

winmm

ws2_32

rasapi32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

wininet

secur32

urlmon

shlwapi

iphlpapi

Sections

.text Size: - Virtual size: 5.8MB

.mapo Size: 3.4MB - Virtual size: 3.4MB

.rsrc Size: 72KB - Virtual size: 72KB

.mapo Size: 156KB - Virtual size: 156KB

.mapo2 Size: 3.5MB - Virtual size: 3.5MB

.text
Size: - Virtual size: 5.8MB

.mapo
Size: 3.4MB - Virtual size: 3.4MB

.rsrc
Size: 72KB - Virtual size: 72KB

.mapo
Size: 156KB - Virtual size: 156KB

.mapo2
Size: 3.5MB - Virtual size: 3.5MB